Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/ca4ba4b6-434b-3936-bc29-e61909de11a1.roa
File:                     ca4ba4b6-434b-3936-bc29-e61909de11a1.roa (raw, json)
Hash identifier:          Z76hgPFiOTGtJ5Eeeul2T7QG1MgPd27DurG+ZzdU0dQ=
Subject key identifier:   38:3B:44:4C:0D:A0:4D:32:70:0A:92:FA:31:C6:80:EF:3F:4E:CE:68
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584B33F1A64105A4001433DD8400
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/ca4ba4b6-434b-3936-bc29-e61909de11a1.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     54613
IP address blocks:        134.195.77.0/24 maxlen: 24
                          134.195.78.0/24 maxlen: 24
                          134.195.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a6:41:05:a4:00:14:33:dd:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=5948f35d-00b2-400a-8579-e4d9a70796ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:f7:36:7a:62:bc:7c:11:f8:87:58:83:2a:
                    03:ae:59:36:62:a4:d5:a6:33:da:dc:2e:51:11:7a:
                    78:bf:d6:c8:ba:c3:a4:23:46:60:dd:0f:cf:32:4e:
                    41:8f:52:16:3e:ab:7e:6c:07:e8:8e:df:04:d3:66:
                    e0:ce:1a:93:df:59:12:b6:1e:7e:c6:bd:db:bc:bd:
                    f5:50:3f:b1:40:0b:71:23:bb:f2:bd:91:73:69:6e:
                    f1:76:51:5b:46:7d:71:71:c0:2b:00:73:6c:ec:b1:
                    53:90:78:f7:76:d5:73:4e:aa:ea:0a:8d:e8:2e:97:
                    75:f3:73:0c:6b:d2:67:10:3e:2f:b5:2c:c6:64:34:
                    ea:b4:66:52:a1:99:eb:28:f4:b2:2d:dc:9b:c9:f2:
                    03:81:9e:37:8e:dc:fe:b4:87:03:82:bb:03:85:c8:
                    28:88:1c:ce:55:6b:e7:39:1e:f8:07:7f:fa:9f:8f:
                    14:27:a0:e1:d8:bb:9f:f0:e4:7b:6c:f5:1e:1a:f8:
                    d7:dd:d2:a1:7c:6d:12:0a:e8:c9:8a:2f:be:91:26:
                    69:d5:1d:a1:15:47:c8:7e:6b:82:3d:ca:6c:7e:bd:
                    77:11:4e:05:2c:0c:75:ad:a1:23:d8:ec:68:c2:aa:
                    fb:db:d2:4f:09:75:0f:ba:7a:6f:0c:5b:28:53:97:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:44:4C:0D:A0:4D:32:70:0A:92:FA:31:C6:80:EF:3F:4E:CE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/ca4ba4b6-434b-3936-bc29-e61909de11a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.77.0-134.195.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:29:4e:82:d6:b4:b6:5f:19:da:99:47:0f:21:dd:ac:f4:b8:
         9d:fd:23:c3:1c:61:4a:c3:c6:9f:4d:19:b8:ac:67:fc:43:ed:
         55:81:92:b0:34:82:3c:3d:60:47:38:7c:0a:76:d4:c3:60:51:
         d6:df:f9:77:60:c4:97:bf:74:c2:3c:20:84:30:31:db:8e:78:
         d7:f5:46:1f:61:87:2c:24:c0:66:a0:ee:0c:64:33:aa:f2:3d:
         fb:b6:2a:67:9a:78:c3:4a:ab:22:3b:40:05:92:08:d6:97:77:
         f6:43:f5:ca:bd:7c:58:fa:a1:13:34:46:e1:87:e0:37:a9:81:
         49:42:8e:61:6f:ab:98:a1:70:05:2d:57:8a:62:3c:24:fa:55:
         f7:2b:cf:38:6a:e3:bc:c8:eb:26:16:bd:ae:7c:81:e1:ed:9a:
         77:3c:41:60:81:ff:92:f0:37:35:33:9d:76:91:81:b6:dc:b8:
         07:45:43:a2:79:bc:0e:1a:78:57:7f:58:e2:0b:3e:7d:4b:d0:
         01:1f:84:28:c4:07:e6:b4:4e:ad:0d:19:eb:80:88:8b:02:81:
         09:67:1a:02:84:24:34:e9:f1:12:e0:d4:99:16:05:5d:7a:45:
         c9:85:8b:bc:e2:b9:d4:b8:f5:fc:56:3a:c5:c6:61:51:d2:d4:
         45:9e:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:23 2025 by rpki-client